Online Shopping System vulnerabilities

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected is an unknown functionality of the file /admin/sumit_form.php. Manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

A cross-site scripting vulnerability has been detected in Online Shopping System 1.0 by code-projects in file offersmail.php. Manipulation of the email argument leads to XSS. The attack can be performed remotely, and the exploit is publicly available.

A SQL injection vulnerability has been found in the Online Shopping System 1.0 by code-projects. It affects an unknown function in the file /login.php of the Login component. Manipulation of the email argument results in SQL injection. The attack can be performed remotely, and the exploit has been made public.